[*] Binary protection state of ubirsvol

  
  	Partial RELRO  No Canary found   NX disabled  No PIE       No RPATH     No RUNPATH   No Symbols


[*] Function sprintf tear down of ubirsvol

   11770:	e3a03016 	mov	r3, #22
   11774:	e5803000 	str	r3, [r0]
   11778:	e3e00000 	mvn	r0, #0
   1177c:	e28dd01c 	add	sp, sp, #28
   11780:	e8bd8030 	pop	{r4, r5, pc}
   11784:	000250e0 	andeq	r5, r2, r0, ror #1
   11788:	0001445e 	andeq	r4, r1, lr, asr r4
   1178c:	0001452a 	andeq	r4, r1, sl, lsr #10
   11790:	e92d48f0 	push	{r4, r5, r6, r7, fp, lr}
   11794:	e28db014 	add	fp, sp, #20
   11798:	e1a06001 	mov	r6, r1
   1179c:	e1a04002 	mov	r4, r2
   117a0:	e1a05000 	mov	r5, r0
   117a4:	ebfffce4 	bl	10b3c <strlen@plt>
   117a8:	e1a02006 	mov	r2, r6
   117ac:	e1a01005 	mov	r1, r5
   117b0:	e2800039 	add	r0, r0, #57	; 0x39
   117b4:	e3c00007 	bic	r0, r0, #7
   117b8:	e04dd000 	sub	sp, sp, r0
   117bc:	e1a0000d 	mov	r0, sp
   117c0:	ebfffcd4 	bl	10b18 <sprintf@plt>
   117c4:	e1a01004 	mov	r1, r4
   117c8:	e1a0000d 	mov	r0, sp
   117cc:	ebffffd2 	bl	1171c <free@plt+0xb98>
   117d0:	e24bd014 	sub	sp, fp, #20
   117d4:	e8bd88f0 	pop	{r4, r5, r6, r7, fp, pc}
   117d8:	e92d48f0 	push	{r4, r5, r6, r7, fp, lr}
   117dc:	e28db014 	add	fp, sp, #20
   117e0:	e1a06001 	mov	r6, r1
   117e4:	e1a07002 	mov	r7, r2
   117e8:	e1a04003 	mov	r4, r3
   117ec:	e1a05000 	mov	r5, r0
   117f0:	ebfffcd1 	bl	10b3c <strlen@plt>
   117f4:	e1a03007 	mov	r3, r7
   117f8:	e1a02006 	mov	r2, r6
   117fc:	e1a01005 	mov	r1, r5
   11800:	e280006b 	add	r0, r0, #107	; 0x6b
   11804:	e3c00007 	bic	r0, r0, #7
   11808:	e04dd000 	sub	sp, sp, r0
   1180c:	e1a0000d 	mov	r0, sp
   11810:	ebfffcc0 	bl	10b18 <sprintf@plt>
   11814:	e1a01004 	mov	r1, r4
   11818:	e1a0000d 	mov	r0, sp
--
   11c64:	eaffffe8 	b	11c0c <free@plt+0x1088>
   11c68:	00014638 	andeq	r4, r1, r8, lsr r6
   11c6c:	0001445e 	andeq	r4, r1, lr, asr r4
   11c70:	0001463f 	andeq	r4, r1, pc, lsr r6
   11c74:	000250e0 	andeq	r5, r2, r0, ror #1
   11c78:	00014672 	andeq	r4, r1, r2, ror r6
   11c7c:	e92d48f0 	push	{r4, r5, r6, r7, fp, lr}
   11c80:	e5904000 	ldr	r4, [r0]
   11c84:	e28db014 	add	fp, sp, #20
   11c88:	e1a00004 	mov	r0, r4
   11c8c:	e1a06003 	mov	r6, r3
   11c90:	e1a07001 	mov	r7, r1
   11c94:	e1a05002 	mov	r5, r2
   11c98:	ebfffba7 	bl	10b3c <strlen@plt>
   11c9c:	e1a02007 	mov	r2, r7
   11ca0:	e1a01004 	mov	r1, r4
   11ca4:	e2800039 	add	r0, r0, #57	; 0x39
   11ca8:	e3c00007 	bic	r0, r0, #7
   11cac:	e04dd000 	sub	sp, sp, r0
   11cb0:	e1a0000d 	mov	r0, sp
   11cb4:	ebfffb97 	bl	10b18 <sprintf@plt>
   11cb8:	e1a02006 	mov	r2, r6
   11cbc:	e1a01005 	mov	r1, r5
--
   127bc:	e59f20c0 	ldr	r2, [pc, #192]	; 12884 <free@plt+0x1d00>
   127c0:	e59f10d0 	ldr	r1, [pc, #208]	; 12898 <free@plt+0x1d14>
   127c4:	e5900000 	ldr	r0, [r0]
   127c8:	ebfff8a5 	bl	10a64 <fprintf@plt>
   127cc:	ebfff8d4 	bl	10b24 <__errno_location@plt>
   127d0:	e3a03013 	mov	r3, #19
   127d4:	eaffffcd 	b	12710 <free@plt+0x1b8c>
   127d8:	e51b30ac 	ldr	r3, [fp, #-172]	; 0xffffff54
   127dc:	e1530009 	cmp	r3, r9
   127e0:	1affffed 	bne	1279c <free@plt+0x1c18>
   127e4:	e51b309c 	ldr	r3, [fp, #-156]	; 0xffffff64
   127e8:	e1540003 	cmp	r4, r3
   127ec:	caffffee 	bgt	127ac <free@plt+0x1c28>
   127f0:	e3570000 	cmp	r7, #0
   127f4:	03a00001 	moveq	r0, #1
   127f8:	0affffb6 	beq	126d8 <free@plt+0x1b54>
   127fc:	e2473001 	sub	r3, r7, #1
   12800:	e1a02004 	mov	r2, r4
   12804:	e5961040 	ldr	r1, [r6, #64]	; 0x40
   12808:	e1a00008 	mov	r0, r8
   1280c:	ebfff8c1 	bl	10b18 <sprintf@plt>
   12810:	e3a01000 	mov	r1, #0
   12814:	e1a00008 	mov	r0, r8
--
   12c3c:	ebfff75e 	bl	109bc <ioctl@plt>
   12c40:	e2900000 	adds	r0, r0, #0
   12c44:	13a00001 	movne	r0, #1
   12c48:	e2600000 	rsb	r0, r0, #0
   12c4c:	e28dd014 	add	sp, sp, #20
   12c50:	e49df004 	pop	{pc}		; (ldr pc, [sp], #4)
   12c54:	40044f02 	andmi	r4, r4, r2, lsl #30
   12c58:	e92d4830 	push	{r4, r5, fp, lr}
   12c5c:	e28db00c 	add	fp, sp, #12
   12c60:	e24dd068 	sub	sp, sp, #104	; 0x68
   12c64:	e5904010 	ldr	r4, [r0, #16]
   12c68:	e1a05001 	mov	r5, r1
   12c6c:	e1a00004 	mov	r0, r4
   12c70:	ebfff7b1 	bl	10b3c <strlen@plt>
   12c74:	e1a02005 	mov	r2, r5
   12c78:	e1a01004 	mov	r1, r4
   12c7c:	e2800039 	add	r0, r0, #57	; 0x39
   12c80:	e3c00007 	bic	r0, r0, #7
   12c84:	e04dd000 	sub	sp, sp, r0
   12c88:	e1a0000d 	mov	r0, sp
   12c8c:	ebfff7a1 	bl	10b18 <sprintf@plt>
   12c90:	e24b1074 	sub	r1, fp, #116	; 0x74
   12c94:	e1a0000d 	mov	r0, sp
--
   12f04:	ebfffa21 	bl	11790 <free@plt+0xc0c>
   12f08:	e3500000 	cmp	r0, #0
   12f0c:	1affff77 	bne	12cf0 <free@plt+0x216c>
   12f10:	e2842048 	add	r2, r4, #72	; 0x48
   12f14:	e1a01006 	mov	r1, r6
   12f18:	e5950030 	ldr	r0, [r5, #48]	; 0x30
   12f1c:	ebfffa1b 	bl	11790 <free@plt+0xc0c>
   12f20:	e3500000 	cmp	r0, #0
   12f24:	1affff71 	bne	12cf0 <free@plt+0x216c>
   12f28:	e595802c 	ldr	r8, [r5, #44]	; 0x2c
   12f2c:	e1a0900d 	mov	r9, sp
   12f30:	e1a00008 	mov	r0, r8
   12f34:	ebfff700 	bl	10b3c <strlen@plt>
   12f38:	e1a02006 	mov	r2, r6
   12f3c:	e1a01008 	mov	r1, r8
   12f40:	e2800039 	add	r0, r0, #57	; 0x39
   12f44:	e3c00007 	bic	r0, r0, #7
   12f48:	e04dd000 	sub	sp, sp, r0
   12f4c:	e28d7008 	add	r7, sp, #8
   12f50:	e1a00007 	mov	r0, r7
   12f54:	ebfff6ef 	bl	10b18 <sprintf@plt>
   12f58:	e2841040 	add	r1, r4, #64	; 0x40
   12f5c:	e1a00007 	mov	r0, r7
--
   131e4:	e1a05001 	mov	r5, r1
   131e8:	e1a06002 	mov	r6, r2
   131ec:	e3a01000 	mov	r1, #0
   131f0:	e3a020b0 	mov	r2, #176	; 0xb0
   131f4:	e1a07000 	mov	r7, r0
   131f8:	e1a00009 	mov	r0, r9
   131fc:	e1a04003 	mov	r4, r3
   13200:	ebfff635 	bl	10adc <emset@plt>
   13204:	e597a048 	ldr	sl, [r7, #72]	; 0x48
   13208:	e8840060 	stm	r4, {r5, r6}
   1320c:	e1a0000a 	mov	r0, sl
   13210:	ebfff649 	bl	10b3c <strlen@plt>
   13214:	e1a0800d 	mov	r8, sp
   13218:	e1a03006 	mov	r3, r6
   1321c:	e1a02005 	mov	r2, r5
   13220:	e1a0100a 	mov	r1, sl
   13224:	e280006b 	add	r0, r0, #107	; 0x6b
   13228:	e3c00007 	bic	r0, r0, #7
   1322c:	e04dd000 	sub	sp, sp, r0
   13230:	e1a0000d 	mov	r0, sp
   13234:	ebfff637 	bl	10b18 <sprintf@plt>
   13238:	e1a0000d 	mov	r0, sp
   1323c:	e284200c 	add	r2, r4, #12
   13240:	e1a01009 	mov	r1, r9
   13244:	ebfffa56 	bl	11ba4 <free@plt+0x1020>
   13248:	e1a0d008 	mov	sp, r8
   1324c:	e3500000 	cmp	r0, #0
   13250:	0a000003 	beq	13264 <free@plt+0x26e0>
   13254:	e3e08000 	mvn	r8, #0
   13258:	e1a00008 	mov	r0, r8
   1325c:	e24bd020 	sub	sp, fp, #32
   13260:	e8bd8ff0 	pop	{r4, r5, r6, r7, r8, r9, sl, fp, pc}
   13264:	e5979044 	ldr	r9, [r7, #68]	; 0x44
   13268:	e1a00009 	mov	r0, r9
   1326c:	ebfff632 	bl	10b3c <strlen@plt>
   13270:	e1a03006 	mov	r3, r6
   13274:	e1a02005 	mov	r2, r5
   13278:	e1a01009 	mov	r1, r9
   1327c:	e280006b 	add	r0, r0, #107	; 0x6b
   13280:	e3c00007 	bic	r0, r0, #7
   13284:	e04dd000 	sub	sp, sp, r0
   13288:	e1a0000d 	mov	r0, sp
   1328c:	ebfff621 	bl	10b18 <sprintf@plt>
   13290:	e1a0000d 	mov	r0, sp
   13294:	e3a02032 	mov	r2, #50	; 0x32
--
   132e0:	e3a03003 	mov	r3, #3
   132e4:	e5843010 	str	r3, [r4, #16]
   132e8:	e1a02006 	mov	r2, r6
   132ec:	e2843014 	add	r3, r4, #20
   132f0:	e1a01005 	mov	r1, r5
   132f4:	e597004c 	ldr	r0, [r7, #76]	; 0x4c
   132f8:	ebfff936 	bl	117d8 <free@plt+0xc54>
   132fc:	e3500000 	cmp	r0, #0
   13300:	1affffd3 	bne	13254 <free@plt+0x26d0>
   13304:	e5978050 	ldr	r8, [r7, #80]	; 0x50
   13308:	e1a0900d 	mov	r9, sp
   1330c:	e1a00008 	mov	r0, r8
   13310:	ebfff609 	bl	10b3c <strlen@plt>
   13314:	e1a03006 	mov	r3, r6
   13318:	e1a02005 	mov	r2, r5
   1331c:	e1a01008 	mov	r1, r8
   13320:	e280006b 	add	r0, r0, #107	; 0x6b
   13324:	e3c00007 	bic	r0, r0, #7
   13328:	e04dd000 	sub	sp, sp, r0
   1332c:	e1a0000d 	mov	r0, sp
   13330:	ebfff5f8 	bl	10b18 <sprintf@plt>
   13334:	e1a0000d 	mov	r0, sp
   13338:	e2841018 	add	r1, r4, #24
--
   13388:	e1a02006 	mov	r2, r6
   1338c:	e1a01005 	mov	r1, r5
   13390:	e597005c 	ldr	r0, [r7, #92]	; 0x5c
   13394:	ebfff90f 	bl	117d8 <free@plt+0xc54>
   13398:	e2508000 	subs	r8, r0, #0
   1339c:	1affffac 	bne	13254 <free@plt+0x26d0>
   133a0:	e5941028 	ldr	r1, [r4, #40]	; 0x28
   133a4:	e594002c 	ldr	r0, [r4, #44]	; 0x2c
   133a8:	e5977060 	ldr	r7, [r7, #96]	; 0x60
   133ac:	e0c32190 	smull	r2, r3, r0, r1
   133b0:	e1a00007 	mov	r0, r7
   133b4:	e1c422f0 	strd	r2, [r4, #32]
   133b8:	ebfff5df 	bl	10b3c <strlen@plt>
   133bc:	e1a03006 	mov	r3, r6
   133c0:	e1a02005 	mov	r2, r5
   133c4:	e1a01007 	mov	r1, r7
   133c8:	e280006b 	add	r0, r0, #107	; 0x6b
   133cc:	e3c00007 	bic	r0, r0, #7
   133d0:	e04dd000 	sub	sp, sp, r0
   133d4:	e1a0000d 	mov	r0, sp
   133d8:	ebfff5ce 	bl	10b18 <sprintf@plt>
   133dc:	e1a0000d 	mov	r0, sp
   133e0:	e3a02081 	mov	r2, #129	; 0x81
--
   135fc:	0a000004 	beq	13614 <free@plt+0x2a90>
   13600:	e5963000 	ldr	r3, [r6]
   13604:	e3530002 	cmp	r3, #2
   13608:	1affffca 	bne	13538 <free@plt+0x29b4>
   1360c:	e2844001 	add	r4, r4, #1
   13610:	eafffff0 	b	135d8 <free@plt+0x2a54>
   13614:	e51b30ac 	ldr	r3, [fp, #-172]	; 0xffffff54
   13618:	e15a0003 	cmp	sl, r3
   1361c:	1afffffa 	bne	1360c <free@plt+0x2a88>
   13620:	e51b309c 	ldr	r3, [fp, #-156]	; 0xffffff64
   13624:	e1540003 	cmp	r4, r3
   13628:	c3a03013 	movgt	r3, #19
   1362c:	c5863000 	strgt	r3, [r6]
   13630:	caffffc0 	bgt	13538 <free@plt+0x29b4>
   13634:	e51b30bc 	ldr	r3, [fp, #-188]	; 0xffffff44
   13638:	e1a02004 	mov	r2, r4
   1363c:	e2438001 	sub	r8, r3, #1
   13640:	e1a03008 	mov	r3, r8
   13644:	e5951040 	ldr	r1, [r5, #64]	; 0x40
   13648:	e1a00007 	mov	r0, r7
   1364c:	ebfff531 	bl	10b18 <sprintf@plt>
   13650:	e3a01000 	mov	r1, #0
   13654:	e1a00007 	mov	r0, r7


[*] Function sprintf used 11 times ubirsvol